chore(deps): bump @angular/compiler from 20.3.32 to 21.2.20 by dependabot[bot] · Pull Request #923 · LINCnil/pia

dependabot · 2026-09-11T09:48:18Z

Bumps @angular/compiler from 20.3.32 to 21.2.20.

Release notes

Sourced from @angular/compiler's releases.

21.2.20

core

Commit Description

sanitize host bindings on concrete hosts

http

Commit Description

match header values exactly when deleting

preserve immutability of materialized clones

run root interceptors in the terminal request chain

21.2.19

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

enable xsrf for root-provided HttpClient

platform-server

Commit Description

update domino to latest version

21.2.18

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

21.2.17

common

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

21.2.20 (2026-08-12)

core

Commit Type Description

6afe6fa781 fix sanitize host bindings on concrete hosts

http

Commit Type Description

fec5977df4 fix match header values exactly when deleting

e33d69a71c fix preserve immutability of materialized clones

caf616670f fix run root interceptors in the terminal request chain

21.2.19 (2026-07-29)

compiler

Commit Type Description

e2660c3dee fix disallow i18n event attributes

7b884f585a fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

948a8d6831 fix distinguish repeated transfer cache params

9949dccce1 fix enable xsrf for root-provided HttpClient

platform-server

Commit Type Description

f34a93c946 fix update domino to latest version

21.2.18 (2026-07-08)

compiler-cli

Commit Type Description

8d22cc953b fix update babel dependencies to latest v7

core

Commit Type Description

6bcce117fb fix avoid caching missing locale data

5a693bafcd fix reject dynamic script host elements

http

Commit Type Description

91df739b80 fix prevent caching of responses with Set-Cookie headers

service-worker

| Commit | Type | Description |

... (truncated)

Commits

6afe6fa fix(core): sanitize host bindings on concrete hosts
7b884f5 fix(compiler): restrict possible event handler check to property names longer...
e2660c3 fix(compiler): disallow i18n event attributes
dc9c996 fix(compiler): sanitize two-way properties
ae1c8a1 fix(compiler): move projection attributes into constants
eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
29ceeff docs: fix typos in source code comments
782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…924) Consolidates dependabot PRs #921, #922, #923, #891 and aligns all @angular/* packages to the same patch version, since Angular requires matching versions across its packages. Production build verified. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

kevin-atnos · 2026-09-21T14:49:07Z

@dependabot rebase

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 20.3.32 to 21.2.20. - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/compiler) --- updated-dependencies: - dependency-name: "@angular/compiler" dependency-version: 20.3.28 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 11, 2026

kevin-atnos mentioned this pull request Sep 21, 2026

chore(deps): bump @angular/* packages to 20.3.31 (build/cli 20.3.37) #924

Merged

dependabot Bot changed the title ~~chore(deps): bump @angular/compiler from 20.3.27 to 20.3.28~~ chore(deps): bump @angular/compiler from 20.3.31 to 21.2.20 Sep 21, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/compiler-20.3.28 branch from 29dc0c1 to 3aca142 Compare September 21, 2026 14:51

kevin-atnos requested a review from brunto September 23, 2026 14:01

kevin-atnos assigned brunto Sep 23, 2026

dependabot Bot changed the title ~~chore(deps): bump @angular/compiler from 20.3.31 to 21.2.20~~ chore(deps): bump @angular/compiler from 20.3.32 to 21.2.20 Sep 30, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/compiler-20.3.28 branch from 3aca142 to 88328a7 Compare September 30, 2026 15:01

Navigation Menu

Repository navigation

chore(deps): bump @angular/compiler from 20.3.32 to 21.2.20 - #923

chore(deps): bump @angular/compiler from 20.3.32 to 21.2.20#923
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/compiler-20.3.28

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading

Uh oh!

kevin-atnos commented Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Commit	Description
	match header values exactly when deleting
	preserve immutability of materialized clones
	run root interceptors in the terminal request chain

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

Commit	Description
	distinguish repeated transfer cache params
	enable xsrf for root-provided HttpClient

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

Commit	Type	Description
fec5977df4	fix	match header values exactly when deleting
e33d69a71c	fix	preserve immutability of materialized clones
caf616670f	fix	run root interceptors in the terminal request chain

Commit	Type	Description
e2660c3dee	fix	disallow i18n event attributes
7b884f585a	fix	restrict possible event handler check to property names longer than 2 characters

Commit	Type	Description
948a8d6831	fix	distinguish repeated transfer cache params
9949dccce1	fix	enable xsrf for root-provided HttpClient

Commit	Type	Description
6bcce117fb	fix	avoid caching missing locale data
5a693bafcd	fix	reject dynamic script host elements

Conversation

dependabot Bot commented on behalf of github Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.2.20

core

http

21.2.19

compiler

http

platform-server

21.2.18

compiler-cli

core

http

service-worker

21.2.17

common

21.2.20 (2026-08-12)

core

http

21.2.19 (2026-07-29)

compiler

http

platform-server

21.2.18 (2026-07-08)

compiler-cli

core

http

service-worker

Uh oh!

kevin-atnos commented Sep 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Sep 11, 2026 •

edited

Loading